CVE-2026-64586 wifi: brcmfmac: drain bus_reset work on device removal

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: drain busreset work on device removal brcmffwcrashed and the debugfs "reset" entry both schedule drvr-busreset, whose callback recovers drvr through containerof and dereferences it. The removal path frees drvr...

CVE-2026-64586 wifi: brcmfmac: drain bus_reset work on device removal

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: drain busreset work on device removal brcmffwcrashed and the debugfs "reset" entry both schedule drvr-busreset, whose callback recovers drvr through containerof and dereferences it. The removal path frees drvr...

CVE-2026-64586

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: drain busreset work on device removal brcmffwcrashed and the debugfs "reset" entry both schedule drvr-busreset, whose callback recovers drvr through containerof and dereferences it. The removal path frees drvr...

EUVD-2026-53773

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: drain busreset work on device removal brcmffwcrashed and the debugfs "reset" entry both schedule drvr-busreset, whose callback recovers drvr through containerof and dereferences it. The removal path frees drvr...

CVE-2026-64587 net: ethernet: arc: emac: quiesce interrupts before requesting IRQ

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: arc: emac: quiesce interrupts before requesting IRQ Normal RX/TX interrupts are enabled later, in arcemacopen, so probe should not see interrupt delivery in the usual case. However, hardware may still present stale...

CVE-2026-64585

CVE-2026-64585 (Linux kernel): The issue affects the CAN esd_usb subsystem where, after free_candev runs, net_device pointers in priv->tx contexts are dereferenced, leading to use-after-free when killing anchored URBs. The fix reorders teardown to stop TX queues first, then call unlink_all_urb...

CVE-2026-64583 usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: bdc: free IRQ and drain funcwakenotify before teardown The Broadcom BDC UDC driver registers its IRQ handler with devmrequestirq in bdcudcinit, so the IRQ is released by devm only after bdcremove returns. devm...

CVE-2026-64583

Summary: CVE-2026-64583 affects the Linux kernel usb gadget Broadcom BDC UDC driver. The issue arises from the irq handling window after devm_request_irq() but before teardown, allowing a shared IRQ to dereference freed memory and cause NULL-deref or use-after-free in bdc_udc_interrupt and relate...

Johnson Controls Inc. TL280

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to access sensitive information on the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for...

MINI-G32F-F85R-5J46

Bulletin has no description...

MINI-935W-H74C-H5FP

Bulletin has no description...

MINI-45GQ-55HC-2VVC

Bulletin has no description...

SUSE CVE-2026-64580

In the Linux kernel, the following vulnerability has been resolved: xfrm6: clear dst.dev on error to avoid double netdevput in xfrm6filldst On the error path where in6devgetdev returns NULL, xfrm6filldst releases the device reference with netdevput but leaves xdst-u.dst.dev set. dstdestroy later...

Hardware Keystores for AI Agent Signing Workflows: A Zero-Trust MCP Enforcement Architecture

AI agents performing cryptographic operations signing Git commits, authenticating API calls, issuing certificates currently store private keys in software-accessible locations: plaintext files, environment variables, or container memory. Any process with sufficient read privileges can extract the...

PT-2026-68419

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the brcmfmac WiFi driver where the removal path frees the drvr structure without draining pending work. Specifically, the brcmf fw crashed function and the debugfs "rese...

PT-2026-68435

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the intel-hid driver where the notify handler function is susceptible to recursion and race conditions when running on multiple CPU cores. On convertible and detachabl...

RHEL 9 : gpsd-minimal (RHSA-2026:51153)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:51153 advisory. gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the...

RHEL 10 : gpsd (RHSA-2026:51075)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:51075 advisory. gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the...

CVE-2026-64595

In the Linux kernel, the following vulnerability has been resolved: HID: hid-lenovo-go: cancel cfgsetup work in hidgocfgremove hidgocfgprobe initialises drvdata.gocfgsetup and schedules it to run 2 ms later: INITDELAYEDWORK&drvdata.gocfgsetup, &cfgsetup; scheduledelayedwork&drvdata.gocfgsetup,...

Linux Distros Unpatched Vulnerability : CVE-2026-64586

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: brcmfmac: drain busreset work on device removal brcmffwcrashed and the debugfs reset entry both schedule drvr-busreset, whose callback recovers drvr throu...